网络入侵检测模型及其体系结构

The Model and Architecture of Network Intrusion Detection

入侵检测技术是近年来兴起的网络安全技术,入侵检测系统是不同于防火墙的主动保护的网络安全系统。介绍了入侵检测的概念、分类,给出了具有通用价值的入侵检测模型和体系结构,最后分析了目前研究的热点及未来发展方向。

The technology of intrusion detection is a networks security technique, which has sprang up in recentyears. The system of intrusion detection, which is difference from the firewall, is an initiative and protective networksecurity system. The conception, classification, technology of the intrusion detective are offered in the article,whichalso introduced a generic intrusion detection model and its architecture.At the end of it, the hot spot of research hasbeen analyzed and the developing direction has been looked into the future.